admerc records
71 published records for vendor admerc.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')64
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')5
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
71 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2020-29288No exploit | An SQL injection vulnerability was discovered in Gym Management System In manage_user.php file, GET parameter 'id' is vulnerable.admerc · gym management system · CWE-89 | Critical9.8 | — | 2.5% | Dec 2, 2020 |
27Monitor | CVE-2025-4464No exploit | itsourcecode Gym Management System ajax.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 1.0% | May 9, 2025 |
27Monitor | CVE-2025-4463No exploit | itsourcecode Gym Management System ajax.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 1.0% | May 9, 2025 |
27Monitor | CVE-2025-4465No exploit | itsourcecode Gym Management System ajax.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 1.0% | May 9, 2025 |
27Monitor | CVE-2025-4466No exploit | itsourcecode Gym Management System ajax.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 1.0% | May 9, 2025 |
27Monitor | CVE-2024-6218No exploit | itsourcecode Vehicle Management System busprofile.php sql injectionadmerc · vehicle management system · CWE-89 | Medium6.9 | — | 0.7% | Jun 20, 2024 |
27Monitor | CVE-2025-4195No exploit | itsourcecode Gym Management System ajax.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 0.6% | May 1, 2025 |
27Monitor | CVE-2025-4485No exploit | itsourcecode Gym Management System ajax.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 0.5% | May 9, 2025 |
27Monitor | CVE-2025-4488No exploit | itsourcecode Gym Management System ajax.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 0.5% | May 9, 2025 |
27Monitor | CVE-2025-4486No exploit | itsourcecode Gym Management System ajax.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 0.5% | May 9, 2025 |
27Monitor | CVE-2025-4483No exploit | itsourcecode Gym Management System view_pdetails.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 0.5% | May 9, 2025 |
27Monitor | CVE-2025-4487No exploit | itsourcecode Gym Management System ajax.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 0.5% | May 9, 2025 |
27Monitor | CVE-2025-4484No exploit | itsourcecode Gym Management System ajax.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 0.5% | May 9, 2025 |
27Monitor | CVE-2025-4363No exploit | itsourcecode Gym Management System ajax.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 0.5% | May 6, 2025 |
27Monitor | CVE-2025-4362No exploit | itsourcecode Gym Management System ajax.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 0.5% | May 6, 2025 |
27Monitor | CVE-2025-4360No exploit | itsourcecode Gym Management System view_member.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 0.5% | May 6, 2025 |
27Monitor | CVE-2025-4359No exploit | itsourcecode Gym Management System ajax.php sql injectionadmerc · gym management system · CWE-74 | Medium6.9 | — | 0.5% | May 6, 2025 |
24Monitor | CVE-2020-28129No exploit | Stored Cross-site scripting (XSS) vulnerability in SourceCodester Gym Management System 1.0 allows users to inject and store arbitrary JavaSadmerc · gym management system · CWE-79 | Medium6.1 | — | 0.9% | Nov 17, 2020 |
22Monitor | CVE-2026-2689No exploit | itsourcecode Event Management System manage_booking.php sql injectionadmerc · event management system · CWE-74 | Medium5.5 | — | 0.6% | Feb 19, 2026 |
22Monitor | CVE-2025-9419No exploit | itsourcecode Apartment Management System addunit.php sql injectionadmerc · apartment management system · CWE-74 | Medium5.5 | — | 0.5% | Aug 25, 2025 |
22Monitor | CVE-2025-9420No exploit | itsourcecode Apartment Management System addfloor.php sql injectionadmerc · apartment management system · CWE-74 | Medium5.5 | — | 0.5% | Aug 25, 2025 |
22Monitor | CVE-2025-9418No exploit | itsourcecode Apartment Management System addowner.php sql injectionadmerc · apartment management system · CWE-74 | Medium5.5 | — | 0.5% | Aug 25, 2025 |
22Monitor | CVE-2025-9421No exploit | itsourcecode Apartment Management System addcomplain.php sql injectionadmerc · apartment management system · CWE-74 | Medium5.5 | — | 0.5% | Aug 25, 2025 |
22Monitor | CVE-2025-9469No exploit | itsourcecode Apartment Management System add_fund.php sql injectionadmerc · apartment management system · CWE-74 | Medium5.5 | — | 0.5% | Aug 26, 2025 |
22Monitor | CVE-2025-9468No exploit | itsourcecode Apartment Management System add_bill.php sql injectionadmerc · apartment management system · CWE-74 | Medium5.5 | — | 0.5% | Aug 26, 2025 |
- CVE-2020-2928840Plan
An SQL injection vulnerability was discovered in Gym Management System In manage_user.php file, GET parameter 'id' is vulnerable.
CriticalCVSS 9.8No exploitEPSS 2%admerc · gym management systemDec 2, 2020
- CVE-2025-446427Monitor
itsourcecode Gym Management System ajax.php sql injection
MediumCVSS 6.9No exploitEPSS 1%admerc · gym management systemMay 9, 2025
- CVE-2025-446327Monitor
itsourcecode Gym Management System ajax.php sql injection
MediumCVSS 6.9No exploitEPSS 1%admerc · gym management systemMay 9, 2025
- CVE-2025-446527Monitor
itsourcecode Gym Management System ajax.php sql injection
MediumCVSS 6.9No exploitEPSS 1%admerc · gym management systemMay 9, 2025
- CVE-2025-446627Monitor
itsourcecode Gym Management System ajax.php sql injection
MediumCVSS 6.9No exploitEPSS 1%admerc · gym management systemMay 9, 2025
- CVE-2024-621827Monitor
itsourcecode Vehicle Management System busprofile.php sql injection
MediumCVSS 6.9No exploitEPSS 0%admerc · vehicle management systemJun 20, 2024
- CVE-2025-419527Monitor
itsourcecode Gym Management System ajax.php sql injection
MediumCVSS 6.9No exploitEPSS 0%admerc · gym management systemMay 1, 2025
- CVE-2025-448527Monitor
itsourcecode Gym Management System ajax.php sql injection
MediumCVSS 6.9No exploitEPSS 0%admerc · gym management systemMay 9, 2025
- CVE-2025-448827Monitor
itsourcecode Gym Management System ajax.php sql injection
MediumCVSS 6.9No exploitEPSS 0%admerc · gym management systemMay 9, 2025
- CVE-2025-448627Monitor
itsourcecode Gym Management System ajax.php sql injection
MediumCVSS 6.9No exploitEPSS 0%admerc · gym management systemMay 9, 2025
- CVE-2025-448327Monitor
itsourcecode Gym Management System view_pdetails.php sql injection
MediumCVSS 6.9No exploitEPSS 0%admerc · gym management systemMay 9, 2025
- CVE-2025-448727Monitor
itsourcecode Gym Management System ajax.php sql injection
MediumCVSS 6.9No exploitEPSS 0%admerc · gym management systemMay 9, 2025
- CVE-2025-448427Monitor
itsourcecode Gym Management System ajax.php sql injection
MediumCVSS 6.9No exploitEPSS 0%admerc · gym management systemMay 9, 2025
- CVE-2025-436327Monitor
itsourcecode Gym Management System ajax.php sql injection
MediumCVSS 6.9No exploitEPSS 0%admerc · gym management systemMay 6, 2025
- CVE-2025-436227Monitor
itsourcecode Gym Management System ajax.php sql injection
MediumCVSS 6.9No exploitEPSS 0%admerc · gym management systemMay 6, 2025
- CVE-2025-436027Monitor
itsourcecode Gym Management System view_member.php sql injection
MediumCVSS 6.9No exploitEPSS 0%admerc · gym management systemMay 6, 2025
- CVE-2025-435927Monitor
itsourcecode Gym Management System ajax.php sql injection
MediumCVSS 6.9No exploitEPSS 0%admerc · gym management systemMay 6, 2025
- CVE-2020-2812924Monitor
Stored Cross-site scripting (XSS) vulnerability in SourceCodester Gym Management System 1.0 allows users to inject and store arbitrary JavaS
MediumCVSS 6.1No exploitEPSS 0%admerc · gym management systemNov 17, 2020
- CVE-2026-268922Monitor
itsourcecode Event Management System manage_booking.php sql injection
MediumCVSS 5.5No exploitEPSS 0%admerc · event management systemFeb 19, 2026
- CVE-2025-941922Monitor
itsourcecode Apartment Management System addunit.php sql injection
MediumCVSS 5.5No exploitEPSS 0%admerc · apartment management systemAug 25, 2025
- CVE-2025-942022Monitor
itsourcecode Apartment Management System addfloor.php sql injection
MediumCVSS 5.5No exploitEPSS 0%admerc · apartment management systemAug 25, 2025
- CVE-2025-941822Monitor
itsourcecode Apartment Management System addowner.php sql injection
MediumCVSS 5.5No exploitEPSS 0%admerc · apartment management systemAug 25, 2025
- CVE-2025-942122Monitor
itsourcecode Apartment Management System addcomplain.php sql injection
MediumCVSS 5.5No exploitEPSS 0%admerc · apartment management systemAug 25, 2025
- CVE-2025-946922Monitor
itsourcecode Apartment Management System add_fund.php sql injection
MediumCVSS 5.5No exploitEPSS 0%admerc · apartment management systemAug 26, 2025
- CVE-2025-946822Monitor
itsourcecode Apartment Management System add_bill.php sql injection
MediumCVSS 5.5No exploitEPSS 0%admerc · apartment management systemAug 26, 2025